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1X1 Responsive to communication(s) filed on Sep 25, 1997 . 

□ This action is FINAL. 

□ Since this application is in condition for allowance except for formal matters, prosecution as to the merits is closed 
in accordance with the practice under Ex parte Quayfe, 1935 CD. 11; 453 O.G. 213. 



A shortened statutory period for response to this action is set to expire 



month(s), or thirty days, whichever 



is longer, from the mailing date of this communication. Failure to respond within the period for response will cause the 
application to become abandoned. (35 U.S.C. § 133). Extensions of time may be obtained under the provisions of 
37 CFR 1.136(a). 



Disposition of Claims 

XI Claim(s) 1-19 



is/are pending in the application. 



Of the above, claim(s) 
□ Claim(s) 



H Claim(s) 1-19 

□ Claim(s) 

□ Claims 



is/are withdrawn from consideration. 

is/are allowed. 

is/are rejected. 

is/are objected to. 



are subject to restriction or election requirement. 



Application Papers 

XI See the attached Notice of Draftsperson's Patent Drawing Review, PTO-948. 
XI The drawing(s) filed on Jun 26, 1997 is/are objected to by the Examiner. 

□ The proposed drawing correction, filed on is Qpproved disapproved. 

□ The specification is objected to by the Examiner. 

□ The oath or declaration is objected to by the Examiner. 
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DETAILED ACTION 



1. 



Claims 1-19 have been examined. 



Drawings 



2. 



The drawings are objected to because the margins are not acceptable as detailed in the 



Notice of Draftspersons Patent Drawing Review, PTO Form 948. Correction is required. 



3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 



4. Claims 1, 2, 5,6, 13, and 14 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Gillon et al. US Patent #5,838,927 in view of Elgamal et al. US Patent #5,657,390. 

As per claims 1, 5, and 13, Gillon et al teaches a method for, computer-readable medium 
having stored thereon a plurality of sequences of instructions for, and a computer data signal 
embodied in a carrier wave representing sequences of instruction for, providing communication 
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protocol-independent security for data transmitted between a first process, executing on a first 
network node, and a second process, executing on a second network node, wherein the first 
network node and the second network node each support at least one common communication 
protocol, the method comprising the steps of, the computer-readable medium having stored 
thereon a plurality of sequences of instructions causing a processor to perform the steps of, and 
the computer data signal embodied in a carrier wave representing sequences of instruction 
providing communication protocol independent security by performing the steps of: 

establishing a first stream between the first process and the network connection ( see 
figure 5, column 7 lines 1 1-15, Gillon et al.'s write stream); 

establishing a second stream between the second process and the network connection ( 
see figure 5, column 7 lines 1 1-15, the reception of the write stream by the client) ; 

encrypting data to be transmitted between the first and second processes, the encrypting 
of the data being independent of the at least one communication protocol (see column 4, lines 11- 
14, the use of HyperText Transport Protocol) supported by the first node (see column 5, lines 60- 
67 and column 7 lines 4-15, Gillon et al.'s encryption of data with no header, and hence, no 
protocol specific information, at the stream level); 

writing data to the first stream (see figure 6, element 610 and column 7 lines 9-13, Gillon 
et al.'s attachment of encryption and compression streams to the write stream); 
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causing the encrypted data to be transmitted from the first network node to the second 
network node (see figure 6, elements 610 and 614 and column 7 lines 13-15, Gillon et al.'s 
transmission of write stream to the client); 

reading the encrypted data from the second stream and decrypting the encrypted data to 
obtain decrypted data which is identical to the data on the first network node before it was 
encrypted (see figure 5 and column 6 lines 38-46, Gillon et al.'s reception and decryption of the 
encrypted data); 

However, Gillon et al does not explicitly teach the establishment of a communications 
channel, secure or otherwise, prior to the transfer of stream data. 

Elgamal et al teaches the establishment of a secure communications channel between a 
first and second network node (see column 7, lines 4-8, his establishment of a secure channel by 
checking connection integrity and authenticating the connected parties) 

It would have been obvious to one of ordinary skill in the computer art at the time the 
invention was made to combine the protocol independent encrypted stream of Gillon et al with 
the secure communication channel of Elgamal et al in order to improve the reliability of the data 
transmitted by Gillon et al's invention and thus reduce data latency experienced by the receiving 
node because Gillon et al suggests that latency is undesirable (column 2, lines 12-18). 
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As per claims 2 5 6 5 and 14, Gillon et al does not explicitly teach the additional steps of 
performing a communication protocol-specific encryption of the data on the first network node 
and performing a communication protocol-specific decryption of the data on the second network 
node. 

Elgamal et al teaches the steps of performing a communication protocol-specific 
encryption of the data on the first network node and performing a communication protocol- 
specific decryption of the data on the second network node (see figure 12c, and column 6 lines 
10-35, Elgamal et al.'s secure sockets layer encryption of data at the server and his secure sockets 
layer decryption of data at the client ) . 

It would have been obvious to one of ordinary skill in the computer art at the time the 
invention was made to combine the protocol independent encryption of Gillon et al with the 
protocol dependent encryption of Elgamal et al in order to hide sensitive information about the 
source of the encrypted data and provide double encryption for the data itself because stronger 
encryption is universally recognized as desirable. 

5. Claims 3, 4,7,8, 15 and 16 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Gillon et al. US Patent #5,838,927 in view of Elgamal et al. US Patent #5,657,390 as 
applied to claims 1,5, and 13 above, and further in view of van Hoff et al US Patent #5,761,421. 

As per claims 3,7, and 15, Gillon et al does not explicitly teach that the data streams are 
Java streams and Elgamal et al does not explicitly teach that the secure channel is a Java secure 
channel. 



* 
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van Hoff et al teaches the secure transfer of Java data between two Java applets running 
on two clients in a network environment (see column 4 lines 26-54, van Hoff et al.'s 
establishment of a secure communications channel between two applets). 

It would have been obvious to one of ordinary skill in the computer art at the time the 
invention was made to combine the streaming protocol independent encryption of Gillon et al 
and the secure channel of Elgamal et al with the Java communications channel and Java transfer 
of van Hoff et al in order to allow for the encryption and secure stream transmission of Java data 
and objects because the maintenance of data integrity and reliability of all data types is 
universally recognized as desirable. 

As per claims 4, 8, and 16, Gillon et al teaches the attachment of a third stream to the 
communication channel and the transmission of data according a specific protocol (see figure 6 
element 608, column 4 lines 11-14, column 6 lines 18-23, Gillon et al.'s attachment of multiple 
function streams to the write stream and the use of HyperText Transfer Protocol) Official Notice 
is taken that multicasting and the branching of a single stream into multiple streams is old and 
well known in the computer art. It would have been obvious to one of ordinary skill in the art at 
the time the invention was made to combine the function providing streams and specific 
communication protocol of Gillon et al with the old and well known practice of multicasting in 
order to allow the fast and efficient distribution of stream data according to a specific 
communication protocol because high transmission speed and reduced data latency are seen as 
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desirable in the computer art. ( Gillon et al suggests that latency is undesirable (column 2, lines 
12-18)) 

6. Claims 9 and 10 are rejected under 35 U.S.C. 103(a) as being unpatentable over Elgamal 
et al. US Patent #5,657,390 in view of Gillon et al. US Patent #5,838,927. 

As per claim 9, Elgamal et al teaches a communication network providing secure 
communication between a first network node and a second network node, wherein the first 
network node and the second network node each support at least one common communication 
protocol, wherein the first network node is communicatively coupled to the second network node 
by a communication channel, the communication network comprising: 

a first process executing on the first network node, wherein the first process provides for 
the encryption of data (see figure 12b, column 13 lines 16-57); 

a secure communications channel for encrypted data transfer ( column 7, lines 4-8, 
Elgamal et al.'s establishment of a secure channel by checking connection integrity and 
authenticating the connected parties); 

a second process executing on the second network node, wherein the second process 
provides for the decryption of data which has been encrypted by the first process (see figure 12b, 
column 13 lines 16-57); 

However, Elgamal et al does not explicitly teach the protocol independent encryption of 
data by the first process or the presence of a first and second stream that provides for the transfer 
of data between the communications channel and first and second processes. 
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Gillon et al teaches the protocol independent encryption of data (see column 5, lines 60- 
67 and column 7 lines 4-15, Gillon et al.'s encryption of data with no header, and hence, no 
protocol specific information, at the stream level) and the use of first and second streams to 
transfer the encrypted data between two processes in a network environment ( figure 5, column 7 
lines 11-15, Gillon et al.'s write stream and reception of the write stream by the client). 

It would have been obvious to one of ordinary skill in the computer art at the time the 
invention was made to combine the secure channel and protocol dependent encryption scheme of 
Elgamal et al with the protocol independent encryption and stream data transfer of Gillon et al in 
order to allow Elgamal et al's system to encrypt a data stream independent of a communications 
protocol because Elgamal et al suggests that is desirable for an encryption scheme to be able to 
be used by many different types of applications on a wide variety of network machines. (See 
Elgamal Column 1, lines 58-67) 

As per claim 10, Elgamal et al does not explicitly teach that the encrypted data can be 
decrypted by the second process based on any communication protocol supported by the second 
network node. 

Gillon et al teaches the protocol independent encryption of data (see column 5, lines 60- 
67 and column 7 lines 4-15, Gillon et al.'s encryption of data with no header, and hence, no 
protocol specific information, at the stream level). The capability of a process on the second node 
to decrypt the protocol independent encrypted data from the first node based upon any 
communication protocol supported by the second node is deemed to be an inherent feature of 
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Gillon et aFs invention because the data was encrypted without any protocol specific information 
attached and thus would be available to any layer (protocol) that desired to decrypt it. 

It would have been obvious to one of ordinary skill in the computer art at the time the 
invention was made to combine the secure channel and protocol dependent encryption scheme of 
Elgamal et al with the protocol independent encryption and stream data transfer of Gillon et al in 
order to allow Elgamal et al's system to encrypt a data stream independent of a communications 
protocol and decrypt the same data based upon any communication protocol supported by the 
second node because Elgamal et al suggests that is desirable for an encryption scheme to be able 
to be used by many different types of applications on a wide variety of network machines. (See 
Elgamal Column 1, lines 58-67) 

7. Claims 1 1 and 12 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Elgamal et al. US Patent #5,657,390 in view of Gillon et al. US Patent #5,83 8,927 as applied to 
claim 9 above, and further in view of van Hoff et al US Patent #5,761,421. 

As per claim 11, Elgamal et al does not explicitly teach that the secure channel is a Java 
secure channel and Gillon et al does not explicitly teach that the data streams are Java streams. 

van Hoff et al teaches the secure transfer of Java data between two Java applets running 
on two clients in a network environment (see column 4 lines 26-54, van Hoff et al.'s 
establishment of a secure communications channel between two applets). 
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It would have been obvious to one of ordinary skill in the computer art at the time the 
invention was made to combine the secure channel of Elgamal et al and streaming protocol 
independent encryption of Gillon et al and the with the Java communications channel and Java 
transfer of van Hoff et al in order to allow for the encryption and secure stream transmission of 
Java data and objects because the maintenance of data integrity and reliability of all data types is 
universally recognized as desirable. 

As per claim 12, Gillon et al teaches the attachment of a third stream to the 
communication channel and the transmission of data according a specific protocol (see figure 6 
element 608, column 4 lines 11-14, column 6 lines 18-23, Gillon et al.'s attachment of multiple 
function streams to the write stream and the use of HyperText Transfer Protocol) Official Notice 
is taken that multicasting and the branching of a single stream into multiple streams is old and 
well known in the computer art. It would have been obvious to one of ordinary skill in the art at 
the time the invention was made to combine the function providing streams and specific 
communication protocol of Gillon et al with the old and well known practice of multicasting in 
order to allow the fast and efficient distribution of stream data according to a specific 
communication protocol because high transmission speed and reduced data latency are seen as 
desirable in the computer art. ( Gillon et al suggests that latency is undesirable (column 2, lines 



12-18)) 
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8. Claim 17 is rejected under 35 U.S.C. 103(a) as being unpatentable over Gillon et al. US 
Patent #5,838,927 in view of Elgamal et al. US Patent #5,657,390. 

Gillon et al teaches a method for providing communication protocol-independent security 
for data transmitted by a process executing on a network node, the method comprising the steps 
of: 

establishing a stream between the first process and the network connection ( see figure 
5, column 7 lines 11-15, Gillon et al.'s write stream); 

encrypting data to be transmitted by processes, the encrypting of the data being 
independent of a communication protocol (see column 4, lines 11-14, the use of HyperText 
Transport Protocol) supported by the network node (see column 5, lines 60-67 and column 7 
lines 4-15, his encryption of data with no header, and hence, no protocol specific information, at 
the stream level); 

writing the encrypted data to the stream (see figure 6, element 610 and column 7 lines 9- 
13, Gillon et al.'s attachment of encryption and compression streams to the write stream); and 

causing the encrypted data to be transmitted from a network node to another network 
node (see figure 6, elements 610 and 614 and column 7 lines 13-15, Gillon et al.'s transmission 
of write stream to the client); 

However, Gillon et al does not explicitly teach the establishment of a communications 
channel, secure or otherwise, prior to the transfer of stream data. 
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Elgamal teaches the establishment of a secure communications channel between a first 
and second network node (see column 7, lines 4-8, Elgamal et al.'s establishment of a secure 
channel by checking connection integrity and authenticating the connected parties) 

It would have been obvious to one of ordinary skill in the computer art at the time the 
invention was made to combine the protocol independent encrypted stream of Gillon et al with 
the secure communication channel of Elgamal et al in order to improve the reliability of the data 
transmitted by Gillon et al's invention and thus reduce data latency experienced by the receiving 
node because Gillon et al suggests that latency is undesirable (column 2, lines 12-18). 

9. Claims 18 and 19 are rejected under 35 U.S.C. 103(a) as being unpatentable over Gillon 
et al. US Patent #5,838,927 in view of Elgamal et al. US Patent #5,657,390 as applied to claim 
17 above, and further in view of van Hoff et al US Patent #5,761,421. 

As per claim 18, Gillon et al does not explicitly teach that the data streams are Java 
streams and Elgamal et al does not explicitly teach that the secure channel is a Java secure 
channel. 

van Hoff et al teaches the secure transfer of Java data between two Java applets running 
on two clients in a network environment (see column 4 lines 26-54, van Hoff et al.'s 
establishment of a secure communications channel between two applets). 

It would have been obvious to one of ordinary skill in the computer art at the time the 
invention was made to combine the streaming protocol independent encryption of Gillon et al 
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and the secure channel of Elgamal et al with the Java communications channel and Java transfer 
of van Hoff et al in order to allow for the encryption and secure stream transmission of Java data 
and objects because the maintenance of data integrity and reliability of all data types is 
universally recognized as desirable. 

As per claim 19, Gillon et al teaches the attachment of a second stream to the 
communication channel and the transmission of data according a specific protocol (see figure 6 
element 608, column 4 lines 11-14, column 6 lines 18-23, Gillon et al.'s attachment of multiple 
function streams to the write stream and the use of HyperText Transfer Protocol) Official Notice 
is taken that multicasting and the branching of a single stream into multiple streams is old and 
well known in the computer art. 

It would have been obvious to one of ordinary skill in the art at the time the invention was 
made to combine the function providing streams and specific communication protocol of Gillon 
et al with the old and well known practice of multicasting in order to allow the fast and efficient 
distribution of stream data according to a specific communication protocol because high 
transmission speed and reduced data latency are seen as desirable in the computer art. ( Gillon et 
al suggests that latency is undesirable (column 2, lines 12-18)) 
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Conclusion 



10. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

— Adams, Jr et al teaches encrypting data portion only of packet by device spliced into 
communications line. 

— Vidrascu et al teaches enciphering without concern for a protocol in low bandwidth 
networks 

1 1 . Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to John J. Meyer whose telephone number is (703) 308-9046. The examiner 
can normally be reached Monday-Thursday from 8:15 AM to 4:45 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Tod Swann, can be reached at (703) 308-7791. 

The fax number for Formal or Official faxes to Technology Center 2700 is (703) 308- 
9051 or 9052. Draft or Informal faxes for this Art Unit can be submitted to (703) 308-5357. 

Any inquiry of a general nature or relating to the status of this application should be 
directed to the Group receptionist whose telephone number is (703) 305-3900. 



JJM 

December 3, 1998 




